For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fmartos_30060's avatar
fmartos_30060
Icon for Nimbostratus rankNimbostratus
May 05, 2010

Audit logging

Hi     I've configured an external syslog, and I'm getting the syslog full of messages like this:     httpd[12864]: 01070417:0: AUDIT - user admin - RAW: httpd(mod_auth_pa...
management
monitoring
jba3126's avatar
jba3126
Icon for Cirrostratus rankCirrostratus
May 24, 2011
I'm getting similar messages as the one listed above. Is there a way to only send the following messages to a single syslog server?

 

 

/var/log/messages

 

/var/log/audit

 

/var/log/ltm

 

 

I followed the instructions in the article link above; however it didn't do a very good job of explaining what the filters are doing :(